Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9058A0C6A7E411EFB8F3F44B762E951A.roa
File: 9058A0C6A7E411EFB8F3F44B762E951A.roa (raw, json)
Hash identifier: /L3vHiXUifj0weSgkIM2aa6rPQPCKpONnSD4w8lffm4=
Subject key identifier: 40:AE:5F:86:00:6B:BE:B4:C0:B6:A8:5B:73:C6:1C:F3:95:82:71:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: D752
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9058A0C6A7E411EFB8F3F44B762E951A.roa
Signing time: Thu 21 Nov 2024 08:42:39 +0000
ROA not before: Sat 30 Nov 2024 08:42:35 +0000
ROA not after: Sat 30 Nov 2024 08:42:35 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
Validation: Failed, certificate is not yet valid
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55122 (0xd752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 30 08:42:35 2024 GMT
Not After : Nov 30 08:42:35 2024 GMT
Subject: CN=673ef27f-7d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:4a:d3:c1:9b:66:cd:a8:36:e6:a4:b0:88:
97:10:4c:69:94:6d:55:95:84:d4:f8:b8:3a:cb:c1:
4d:1e:a0:36:39:f8:40:e5:63:7c:c8:6e:ba:43:1f:
fd:7f:a3:f4:57:2d:70:29:2b:69:2c:6f:7e:48:25:
8c:95:38:11:05:eb:9b:87:a4:c8:e2:37:da:78:7d:
35:34:ef:7e:cd:2b:1d:3c:63:d5:a8:d5:e0:ed:ea:
c7:28:ae:fc:31:61:24:59:9e:7c:1c:e4:7d:3a:f5:
cf:b3:c6:5a:19:a1:00:07:e5:c4:97:91:61:c4:c9:
90:32:44:e1:8c:e4:5b:39:f7:eb:bd:d3:16:76:ff:
89:41:4c:98:b2:7e:dd:38:b9:b1:ef:cc:91:26:b6:
26:57:91:08:48:75:60:5f:24:be:5b:fa:74:0e:ca:
5c:72:2b:b1:72:bf:60:58:74:9d:e5:c8:29:d0:2a:
5c:ad:df:ad:1d:9e:4a:15:7c:06:23:24:7a:a2:7d:
32:22:d5:3f:76:67:53:8f:40:4f:84:34:94:7c:76:
e8:65:87:6f:c5:17:84:c4:8b:04:93:44:4d:75:37:
2c:93:69:1c:fc:df:72:22:3a:2a:25:75:69:6d:84:
5b:f3:c3:75:27:e9:23:09:bb:8f:1c:1d:31:36:09:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:5F:86:00:6B:BE:B4:C0:B6:A8:5B:73:C6:1C:F3:95:82:71:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9058A0C6A7E411EFB8F3F44B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
Signature Algorithm: sha256WithRSAEncryption
09:20:25:8d:04:8f:25:7c:8c:e1:9d:61:53:9b:c9:49:8d:e6:
82:7a:67:65:17:d2:d6:10:9b:d2:be:51:32:3d:46:0a:77:9d:
ef:63:66:84:95:5d:8c:38:d9:ef:aa:68:bb:64:a2:3d:cc:0c:
91:b8:1d:81:d2:a2:fa:3e:ba:8b:4f:14:6c:22:a8:e7:09:bf:
3e:a2:70:20:13:43:e4:87:f0:8d:f9:6d:7c:70:0a:f2:e9:a3:
ce:cc:be:ae:fe:01:aa:29:59:46:d9:74:d8:e9:30:99:45:b8:
09:0e:64:83:2f:c2:99:0b:c7:57:dc:ef:0a:ed:d7:fe:57:86:
b6:20:5e:c0:73:f2:50:e4:fe:f7:4b:88:c7:02:e9:21:ce:7f:
c5:3e:72:1d:e8:e0:a6:c1:33:66:0a:4c:25:bb:ce:c1:05:c0:
7c:11:f4:a0:18:3f:a8:ca:23:a1:ff:ed:f6:59:46:6f:bd:be:
5c:85:0b:0f:3c:7e:da:08:6f:3e:da:8d:09:28:ff:5a:86:d0:
d0:48:d8:57:78:8a:44:db:5a:d1:98:5c:e8:b2:c3:3c:31:83:
53:03:28:f8:b5:97:0d:b9:93:72:cb:91:25:eb:be:9f:1b:2c:
d7:d2:fc:05:39:00:ac:02:80:74:ba:95:84:43:54:26:b3:9e:
1c:75:49:ed
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDANdSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQxMTMwMDg0MjM1WhcNMjQxMTMwMDg0MjM1WjAYMRYw
FAYDVQQDEw02NzNlZjI3Zi03ZDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvrRK08GbZs2oNuaksIiXEExplG1VlYTU+Lg6y8FNHqA2OfhA5WN8yG66
Qx/9f6P0Vy1wKStpLG9+SCWMlTgRBeubh6TI4jfaeH01NO9+zSsdPGPVqNXg7erH
KK78MWEkWZ58HOR9OvXPs8ZaGaEAB+XEl5FhxMmQMkThjORbOffrvdMWdv+JQUyY
sn7dOLmx78yRJrYmV5EISHVgXyS+W/p0Dspcciuxcr9gWHSd5cgp0Cpcrd+tHZ5K
FXwGIyR6on0yItU/dmdTj0BPhDSUfHboZYdvxReExIsEk0RNdTcsk2kc/N9yIjoq
JXVpbYRb88N1J+kjCbuPHB0xNgnofwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFECu
X4YAa760wLaoW3PGHPOVgnGsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MDU4QTBDNkE3RTQxMUVGQjhGM0Y0NEI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOxgMA0GCSqGSIb3DQEBCwUA
A4IBAQAJICWNBI8lfIzhnWFTm8lJjeaCemdlF9LWEJvSvlEyPUYKd53vY2aElV2M
ONnvqmi7ZKI9zAyRuB2B0qL6PrqLTxRsIqjnCb8+onAgE0Pkh/CN+W18cAry6aPO
zL6u/gGqKVlG2XTY6TCZRbgJDmSDL8KZC8dX3O8K7df+V4a2IF7Ac/JQ5P73S4jH
Aukhzn/FPnId6OCmwTNmCkwlu87BBcB8EfSgGD+oyiOh/+32WUZvvb5chQsPPH7a
CG8+2o0JKP9ahtDQSNhXeIpE21rRmFzossM8MYNTAyj4tZcNuZNyy5El676fGyzX
0vwFOQCsAoB0upWEQ1Qms54cdUnt
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:39 2024 by rpki-client on console-fra.rpki-client.org